Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a313a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666163323a313a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          r9gm5J4ftr92LGqoSJWBvIdGEDeIydwnF8pZHkiJDYg=
Subject key identifier:   0B:E4:A2:04:A7:D5:EF:E2:1A:B5:A9:C0:3C:28:D1:84:18:F9:C1:9B
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       08F0EA9D797A06003EC31DC28CE94A8750CE7105
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a313a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Fri 18 Oct 2024 07:53:48 +0000
ROA not before:           Fri 18 Oct 2024 07:48:48 +0000
ROA not after:            Fri 17 Oct 2025 07:53:48 +0000
asID:                     200775
IP address blocks:        2602:fac2:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f0:ea:9d:79:7a:06:00:3e:c3:1d:c2:8c:e9:4a:87:50:ce:71:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Oct 18 07:48:48 2024 GMT
            Not After : Oct 17 07:53:48 2025 GMT
        Subject: CN=0BE4A204A7D5EFE21AB5A9C03C28D18418F9C19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:89:f1:37:39:91:d0:0f:b2:cf:48:0b:61:
                    1a:2b:85:ef:19:87:66:e5:12:e6:f1:dd:fe:36:cc:
                    c8:22:a9:b9:09:67:fc:07:08:05:12:f0:7a:46:58:
                    76:28:8f:b2:29:af:07:92:76:0e:87:46:ff:97:49:
                    e6:c1:83:a5:e9:3f:52:25:8e:8d:12:cf:45:a1:5e:
                    5d:72:23:2c:27:b0:5c:ef:b7:3b:86:e3:a6:ef:c6:
                    a4:20:66:5f:a1:01:e7:bb:cf:d3:ec:cd:17:bc:a3:
                    76:f7:87:51:68:d9:40:1e:a0:a2:2c:bc:97:48:bb:
                    72:75:73:8b:09:34:b5:f9:4d:20:ae:a9:6c:49:af:
                    6b:f8:93:35:29:11:28:c7:e6:2a:68:52:5f:03:75:
                    b7:3e:aa:c1:1f:cd:10:6e:8b:e3:1c:c3:16:e8:6d:
                    be:9f:32:49:40:d4:85:11:c9:fd:38:f7:d4:3a:bc:
                    ec:76:00:af:e4:34:26:5a:09:d0:9b:d6:3b:a8:62:
                    b2:40:cf:86:82:41:7d:01:f7:4f:d2:26:cd:89:80:
                    43:1d:e4:94:21:86:5e:d2:50:24:b2:1d:66:4c:ec:
                    42:91:79:8a:7c:81:58:de:5d:99:29:12:77:d1:2a:
                    d3:4b:4b:e8:df:31:7e:b3:ad:7e:41:90:9f:18:60:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E4:A2:04:A7:D5:EF:E2:1A:B5:A9:C0:3C:28:D1:84:18:F9:C1:9B
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a313a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:1c:91:5f:f4:bf:bb:fe:7b:7a:f8:65:47:f4:5d:02:00:2f:
         c3:20:61:b9:b3:53:dd:62:27:b5:57:f2:18:18:82:07:5b:70:
         19:cc:23:cb:e2:3d:2a:53:a4:9d:99:ca:49:fb:14:18:ac:cc:
         59:3c:13:86:96:f0:39:91:ea:5d:a6:89:da:6c:d5:99:5e:dd:
         46:f2:00:a0:13:f5:6e:4f:40:dd:dc:60:c0:7d:bf:27:8c:ab:
         9a:a8:8c:0d:dd:9a:32:7b:71:0a:b7:54:4d:3f:f8:a8:f3:b5:
         df:45:68:14:ff:87:64:d4:aa:e9:d9:04:c5:17:8e:36:aa:5d:
         1c:ff:de:ac:ef:49:f8:37:9e:5d:a3:0b:0f:22:ce:df:85:07:
         83:e1:45:9a:9e:3a:9b:4d:88:94:8b:fc:13:f7:d4:37:95:50:
         af:29:3b:2e:c0:8e:8e:a5:fb:c7:9d:2a:6e:07:d5:8d:75:ee:
         61:a7:a4:7d:6a:39:00:55:9a:15:04:47:8e:c1:29:bd:7a:06:
         05:c0:b2:a8:33:6f:78:ec:67:bf:9a:ca:46:36:36:00:05:7f:
         21:58:71:36:d4:be:92:75:60:b9:f6:7c:2b:2c:6b:34:b7:7f:
         d3:e9:d2:f3:d1:6c:05:59:33:d4:57:7f:9a:59:8e:b2:84:55:
         9c:20:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:33 2024 by rpki-client on console-fra.rpki-client.org